PANews reported on November 14 that Binance founder Zhao Changpeng tweeted that he has noticed that some users have shared API keys with third-party platforms, resulting in unexpected transactions in their accounts. Users are advised to delete API keys shared with third-party platforms to ensure asset security.
On October 23, 3Commas said that it had discovered multiple fake websites that may have stolen user trading API keys. On October 26, US users reported that Coinbase also had an API key leak that led to theft of coins through cross-trading.